Cybersecurity Essentials for Insurance Agents: Lessons from Insurance Business Babes Podcast

In this episode of the Insurance Business Babes podcast, host Kathe Kline, co-host Joanna Wyckoff, and guest expert Jameson Keller dive deep into cybersecurity practices tailored for insurance professionals. Regardless of the type of insurance you sell, handling sensitive client data comes with significant risks. Here are the main takeaways and best practices discussed during their insightful conversation.

Jameson points out that many agents use free email services like Gmail, Yahoo, or AOL without proper business associate agreements (BAA). Not only does this look unprofessional to clients—think “godsfavoriteparadise@yahoo.com”—but it’s a massive HIPAA violation. Instead, agents should purchase a business domain and use platforms like Google Workspace, ensuring a BAA is signed for true compliance and privacy. This upgrade protects client information and elevates your professional image.

Kathe and Jameson emphasize that simply locking your computer with a password isn’t enough. Encrypting your hard drive (for example, using FileVault on Mac or BitLocker on Windows) is essential. If devices are stolen, encryption keeps client data safe. Carriers like UnitedHealthcare increasingly require proof of device encryption. Without it, agents risk severe financial and reputational harm.

Another cornerstone of cyber hygiene is multi-factor authentication (MFA). Jameson highlights four areas where MFA should be a must: CRM systems, bank accounts, password managers, and email. Utilizing authenticator apps rather than text-message codes adds another layer of protection against hacks and phishing attempts.

Say goodbye to “password123.” Modern hacking tools can crack simple passwords in minutes. Instead, use password managers like LastPass or Bitwarden to generate and store strong, unique credentials for every account. Export and secure a physical backup annually, as suggested by Kathe, but always keep these records under lock and key.

Lastly, always ensure cloud services and AI tools you use are HIPAA compliant and will sign a BAA. Never input protected health information (PHI) into free AI platforms unless verified secure.

By following these practical steps, insurance agents not only protect their business and clients, but also demonstrate industry leadership in cybersecurity and compliance.

This episode is sponsored by ⁠CertifiedMedicareAgents.com⁠. Use the coupon code BABES2024 for a free lifetime BRONZE membership.